2017-09-26 19:29:00 2019-10-03 02:03:26

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
IBM Business Process Manager (BPM) Advanced 8.5.5.0 IBM Business Process Manager (BPM) 8.5.5.0 Ibm Business process manager 8.5.0.2 ~~standard~~~ (not an official CPE) Ibm Business process manager 8.5.0.2 ~~express~~~ (not an official CPE) Ibm Business process manager 8.5.0.2 ~~advanced~~~ (not an official CPE) Ibm Business process manager 8.5.0.2 (not an official CPE) IBM Business Process Manager (BPM) 8.5.0.1 Standard Edition IBM Business Process Manager (BPM) 8.5.0.1 Express Edition IBM Business Process Manager (BPM) Advanced 8.5.0.1 IBM Business Process Manager (BPM) 8.5.0.1 IBM Business Process Manager (BPM) 8.5.0.0 Standard Edition IBM Business Process Manager (BPM) 8.5.0.0 Express Edition IBM Business Process Manager (BPM) Advanced 8.5.0.0 IBM Business Process Manager (BPM) 8.5.0.0 IBM Business Process Manager (BPM) 8.0.1.3 Standard Edition IBM Business Process Manager (BPM) 8.0.1.3 Express Edition IBM Business Process Manager (BPM) Advanced 8.0.1.3 Ibm Business process manager 8.0.1.3 (not an official CPE) IBM Business Process Manager (BPM) 8.0.1.2 Standard Edition IBM Business Process Manager (BPM) 8.0.1.2 Express Edition IBM Business Process Manager (BPM) Advanced 8.0.1.2 IBM Business Process Manager (BPM) 8.0.1.2 IBM Business Process Manager (BPM) 8.0.1.1 Standard Edition IBM Business Process Manager (BPM) 8.0.1.1 Express Edition IBM Business Process Manager (BPM) Advanced 8.0.1.1 IBM Business Process Manager (BPM) 8.0.1.1 IBM Business Process Manager (BPM) 8.0.1.0 Standard Edition IBM Business Process Manager (BPM) 8.0.1.0 Express Edition IBM Business Process Manager (BPM) Advanced 8.0.1.0 IBM Business Process Manager (BPM) 8.0.1.0 IBM Business Process Manager (BPM) 8.0.0.0 Standard Edition IBM Business Process Manager (BPM) 8.0.0.0 Express Edition IBM Business Process Manager (BPM) Advanced 8.0.0.0 IBM Business Process Manager (BPM) 8.0.0.0 IBM Business Process Manager (BPM) 7.5.1.2 Standard Edition IBM Business Process Manager (BPM) 7.5.1.2 Express Edition IBM Business Process Manager (BPM) Advanced 7.5.1.2 IBM Business Process Manager (BPM) 7.5.1.2 IBM Business Process Manager (BPM) 7.5.1.1 Standard Edition IBM Business Process Manager (BPM) 7.5.1.1 Express Edition IBM Business Process Manager (BPM) Advanced 7.5.1.1 IBM Business Process Manager (BPM) 7.5.1.1 IBM Business Process Manager (BPM) 7.5.1.0 Standard Edition IBM Business Process Manager (BPM) 7.5.1.0 Express Edition IBM Business Process Manager (BPM) Advanced 7.5.1.0 IBM Business Process Manager (BPM) 7.5.1.0 IBM Business Process Manager (BPM) 7.5.0.1 Standard Edition IBM Business Process Manager (BPM) 7.5.0.1 Express Edition IBM Business Process Manager (BPM) Advanced 7.5.0.1 IBM Business Process Manager (BPM) 7.5.0.1 IBM Business Process Manager (BPM) 7.5.0.0 Standard Edition IBM Business Process Manager (BPM) 7.5.0.0 Express Edition IBM Business Process Manager (BPM) Advanced 7.5.0.0 IBM Business Process Manager (BPM) 7.5.0.0 IBM Business Process Manager (BPM) 8.5.5.0 Express Edition IBM Business Process Manager (BPM) 8.5.5.0 Standard Edition Ibm Business process manager 8.5.6.0 (not an official CPE) Ibm Business process manager 8.5.6.0 ~~advanced~~~ (not an official CPE) Ibm Business process manager 8.5.6.0 ~~express~~~ (not an official CPE) Ibm Business process manager 8.5.6.0 ~~standard~~~ (not an official CPE) Ibm Business process manager 8.5.6.1 (not an official CPE) Ibm Business process manager 8.5.6.1 ~~advanced~~~ (not an official CPE) Ibm Business process manager 8.5.6.1 ~~express~~~ (not an official CPE) Ibm Business process manager 8.5.6.1 ~~standard~~~ (not an official CPE) Ibm Business process manager 8.5.6.2 (not an official CPE) Ibm Business process manager 8.5.6.2 ~~advanced~~~ (not an official CPE) Ibm Business process manager 8.5.6.2 ~~express~~~ (not an official CPE) Ibm Business process manager 8.5.6.2 ~~standard~~~ (not an official CPE) Ibm Business process manager 8.5.7.0 (not an official CPE) Ibm Business process manager 8.5.7.0 ~~advanced~~~ (not an official CPE) Ibm Business process manager 8.5.7.0 ~~express~~~ (not an official CPE) Ibm Business process manager 8.5.7.0 ~~standard~~~ (not an official CPE)